Security Alliance history

Another coalition of the willing but not a military alliance is the Proliferation Security Initiative (PSI), also initiated in 2002.

2003—ISA creates its first set of best practices guides to combat insider threats, long before insiders were a well-appreciated risk.

2005—ISA chairs the congressionally appointed Cross Sector Cyber Security Working Group Committee, which focuses on the use of market incentives, rather than regulation, the way to improve private sector cybersecurity.

In November of 2008 at the ISSA CISO Forum in Las Vegas, the concept of the Cloud Security Alliance was born.

CSA’s outreach to the information security community to create its initial work product for the 2009 RSA Conference resulted in dozens of volunteers to research, author, edit and review CSA’s first whitepaper.

2011: Hosted the White House at our CSA Summit to announce the US Federal Cloud Strategy

2012: Established CSA Europe in Edinburgh, UK2012: Launched the registry of cloud provider security practices, the CSA Security, Trust and Assurance Registry (STAR)

2013: Established CSA Asia Pacific in Singapore2013: Launched CSA STAR Certification2013: Release Big Data Security & Privacy Research

2014: Established representation in Peoples Republic of China2014: Release Software Defined Perimeter Specifications2014: Launched CSA STAR Attestation

2015—Congress passes and the president signs the Cybersecurity Act of 2015, which adopts the ISA recommendation of extending liability protection to companies seeking to share cyber threat information.

2016: Forms Australia/New Zealand Regional Coordinating Body2016: Releases ‘The Treacherous Twelve’ Cloud Computing Top Threats in 20162016: Issues Big Data Security and Privacy Handbook: 100 Best Practices in Big Data Security and Privacy

2017: STARWatch Cloud Security Management Application becomes generally available2017: Establishes Third-Party Global Consultancy program2017: Releases major updates to Guidance v4.02017: Issues Code of Conduct for GDPR Compliance2017: Releases significant updates to CCSKv4

2018 – ISA publishes international cyber-risk handbooks for boards of directors in the United Kingdom and Germany.

2019 – ISA publishes cyber-risk handbooks for boards of directors in Latin America, Japan and Europe.

2020 – ISA and the National Association of Corporate Directors publish an updated version of the cyber risk handbook for boards of directors, The Cyber-Risk Oversight 2020 Handbook.